[Snyk] Fix for 14 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • www/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	Yes	Proof of Concept
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	Yes	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit
	520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	No	No Known Exploit
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ember-cli-babel

The new version differs by 250 commits.

• 0b83e42 7.0.0
• fcf317f Merge pull request Is it OK to run unlock and payout modules together? sammy007/open-ethereum-pool#140 from babel/babel-7
• d01d724 Prevent issues with @ babel/preset-env getting unknown options.
• 1ea60c3 Merge branch 'master' into babel-7
• 6955f46 Drop support for ember-cli < 2.13.
• eb03764 Merge changes from master...
• c58ae85 6.17.0
• 5486b3e Add recent releases to changelog...
• ec3f25c Merge pull request Unlock Suspended sammy007/open-ethereum-pool#241 from arthirm/master
• af16202 Bumping broccoli-babel-transpiler
• b4528ff Update test to properly match plugin style.
• 2ea0e47 Remove brittle (and unneeded) tests.
• 9671601 7.0.0-beta.5
• 1167211 Remove stray .only.
• cf8f7ee Fix issue with @ babel/polyfill update.
• b4ea00d 7.0.0-beta.4
• e53e927 Update dependencies.
• 1e494d6 Update babel-polyfill -> @ babel/polyfill.
• 7008a5f Use release version of broccoli-babel-transpiler.
• 932a1d0 Merge pull request ERROR[12-01|08:38:08] write tcp 127.0.0.1:8545->127.0.0.1:57762: write: broken pipe sammy007/open-ethereum-pool#239 from dfreeman/green-tests
• a185133 Get tests passing with throwUnlessParallelizable: true
• 6d11f44 Merge pull request Unable to process payouts: invalid argument 0: json: cannot unmarshal hex string of odd length into Go value of type common.Address sammy007/open-ethereum-pool#237 from babel/rwjblue-patch-1
• b96e5cb Use correct preset env...
• f9e4f17 Fix file: reference in package.json.

See the full diff

Package name: ember-cli-htmlbars-inline-precompile

The new version differs by 30 commits.

• ae552eb 0.4.0
• 133cd0a Release 0.4.0 final.
• 705f173 0.4.0-beta.2
• 335e4c5 Update CHANGELOG.
• 62e44bd Update minimum version of babel plugin.
• d86edac 0.4.0-beta.1
• 74fd184 Merge pull request [Question] My pool block is 0 sammy007/open-ethereum-pool#69 from rwjblue/babel-6
• ffafb16 Remove welcome page.
• 99aad43 Add ember-cli-shims back to ember-source scenario.
• 3ae7891 Update min engine version.
• d8cb4a1 Make function properly for babel@6 version.
• f68e8b6 Update minimum versions of deps and devDeps.
• c18f6d3 fixup! Add babel@6 to devDeps for test harness.
• 8f92b23 Remove unused directories.
• 1e9f66e Set ember-cli to 2.11.1.
• edeceaa Add babel@6 to devDeps for test harness.
• c113ff3 fixup! Update minimum node version.
• 06f4fc7 ES6ify
• 1f9d121 Update for babel@6.
• e157867 Update minimum node version.
• a8e851b Merge pull request [Question] Please tell me how to change coin from eth to etc pool  sammy007/open-ethereum-pool#68 from samselikoff/patch-1
• d1763d7 Ensure super call is bounded
• 083ae62 Merge pull request npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue sammy007/open-ethereum-pool#67 from Turbo87/ci-deploy
• 5fa9b15 CI: Enable automatic NPM deployment for tags

See the full diff

Package name: ember-export-application-global

The new version differs by 7 commits.

• 3641991 Release 2.0.1
• 84999a5 Remove ember-cli-babel dependency.
• 2e335cf 2.0.0
• d8904dd Merge pull request [Snyk] Fix for 14 vulnerabilities #24 from ember-cli/update-babel-6
• cf11f03 Update to Babel 6.
• bf21819 Merge pull request [Snyk] Security upgrade ember-cli from 2.9.1 to 2.12.0 #23 from ember-cli/clean-up
• 06605c5 addon cleanup

See the full diff

Package name: ember-welcome-page

The new version differs by 250 commits.

• 4d9d8dc Release 6.0.0
• 2bd04d2 Merge pull request Pool https error sammy007/open-ethereum-pool#383 from ember-cli/add-changelog-release-automation
• 8c712f2 Add more release automation.
• 1dc375d Merge pull request Protect Pool with password againts Bots or banning them sammy007/open-ethereum-pool#382 from ember-cli/kategengler-patch-1
• 6f128b6 Restore CI Publishing
• 3b39cd8 Merge pull request Proxy functionality sammy007/open-ethereum-pool#346 from ember-cli/convert-to-v2-format
• 81660d7 eslint ignore dist
• ce41635 use published addon-dev package
• b24ae8e adjust startup scripts
• 333472b documenting rollup config
• a511b06 more rollup work
• 61f1a95 drop explicit app dir, we will generate it in the build
• db0d26b re-organizing around "src" and "dist"
• 9d2d0d4 ignore dist
• f6394f9 beginning to test app reexports plugin
• f85a963 [wip] starting to use rollup to provide dev-time niceties
• f06541c use exports to keep familiar addon directory
• 8a4cfd7 more contributing docs
• 5de287b v3.27.0...v3.28.0
• b34c133 writing contributing docs
• 7177038 update to released addon-shim and add scripts
• bc73a56 drop scenario-specific packages from test-app
• ac97fe6 fix json output
• f76c66c backwards name

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.